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DIALOG (R) File 8:Ei Compendex{R) 

(c) 2005 Elsevier Eng. Info. Inc. All rts . reserv. 

05403922 E.I. No: E2099104860980 

Title: Design, implementation and operation of an Email pseudonym server 
Author: Mazieres, David; Kaashoek, M. Frans 

Corporate Source: MIT Lab for Computer Science, Cambridge, MA, USA 

Conference Title: Proceedings of the 1998 5th ACM Conference on Computer 
and Communications Security, CCS -5 

Conference Location: San Francisco, CA, USA Conference Date: 
19981103-19981105 

Sponsor: ACM S ICS AC 

E.I. Conference No.: 55056 

Source: Proceedings of the ACM Conference on Computer and Communications 
Security 1998. ACM, New York, NY, USA. p 27-36 
Piiblication Year: 1998 
CODEN: 002180 
Language: English 

Document Type: CA; (Conference Article) Treatment: T; (Theoretical) 
Journal Announcement: 9912W1 

Abstract: Attacks on servers that provide anonymity generally fall into 
two categories: attempts to expose anonymous users and attempts to silence 
them. Much existing work concentrates on withstanding the former, but the 
threat of the latter is equally real . One particularly effective attack 
against anonymous servers is to abuse them and stir up enough trouble 
that they must shut down. This paper describes the design, implementation, 
and operation of nym. alias .net, a server providing untraceable email 
aliases. We enumerate many kinds of abuse the system has weathered during 
two years of operation, and explain the measures we enacted in response. 
From our experiences, we distill several principles by which one can 
protect anonymous servers from similar attacks. (Author abstract) 15 
Ref s . 

Descriptors: *Client server computer systems; Electronic mail; Computer 
systems programming; Security of data; Internet 
Identifiers: Electronic mail pseudonym servers 
Classification Codes: 

722.4 (Digital Computers & Systems); 723.5 (Computer Applications); 
723.1 (Computer Programming); 723.2 (Data Processing) 
722 (Computer Hardware) ; 723 (Computer Software) 
72 (COMPUTERS & DATA PROCESSING) 
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(c) 2005 Institution of Electrical Engineers. All rts. reserv. 

08022928 INSPEC Abstract Number: B2001-10-6210L-106 , C2001-10-5620W- 049 
Title: Bilateral anonymity and prevention of abusing logged Web addresses 
Author(s): Demuth, T.; Rieke, A. 

Author Affiliation: Dept. of Commun. Syst., Hagen Univ., Germany 
Conference Title: MILCOM 2000 Proceedings. 21st Century Military 

Communications. Architectures and Technologies for Information Superiority 

(Cat. No. 00CH37155) Part vol.1 p. 435-9 vol.1 
Publisher: IEEE, Piscataway, NJ, USA 

Publication Date: 2000 Country of Publication: USA 2 vol. xxvii+1238 
PP • 

ISBN: 0 7803 6521 6 Material. Identity Number: XX-2000-02174 

U.S. Copyright Clearance Center Code: 0 7803 6521 6/2000/$10 . 00 
Conference Title: Proceedings of IEEE Military Communications Conference 
(MILCOM' 00) 

Conference Sponsor: IEEE Commun. Soc . ; Armed Forces Commun. & Electron. 
Assoc . (AFCEA) 

Conference Date: 22-25 Oct. 2 000 Conference Location: Los Angeles, CA, 
USA 



Language: English Document Type: Conference Paper (PA) 
Treatment: Theoretical (T) 

Abstract : A lot of effort has been taken to hide the content of a message 
from eavesdroppers. However, often not only the content, but also the 
address and identity of sender and/or receiver of the message are of 
interest for attackers. For that reason, several approaches were developed 
to guarantee anonymity in the case of email . A lot of services, offer 
users to access Web pages unrecognised or without the risk of being 
backtracked, respectively. This kind of anonymity is called user or "client 
anonymity" . However, there are only a few offers that provide an equivalent 
protection for content providers, although this feature is desirable for 
many situations in which the identity of a piiblisher or content provider is 
to be hidden. This property is called server anonymity. The term " server 
anonymity" is explained in detail with the help of an existing system 
fulfilling some hundreds of thousand user requests per day. We also 
describe our experiences in providing such a system with respect to misuse . 
Furthermore there is another sensitive fact. While browsing Web pages, the 
used URLs are logged both by the Web client (Web browser) which is used and 
the Internet service provider (ISP) , or any other instance or organisation 
that is involved in the communication. Hence the ISP can investigate the 
content a user is interested in afterwards simply by reusing the logged 
URLs. The same problem results from the behaviour of regular Web browsers 
to build an address history and local copies (browser cache) of the visited 
Web pages. We demonstrate a way of preventing the reuse of logged Web 
addresses by introducing the concept of temporarily valid Web addresses. ( 
11 Refs) 

Subfile: B C 

Descriptors: file servers ; information resources; Internet; online 
front-ends; security of data; telecommunication security 

Identifiers: bilateral anonymity; logged Web address abuse prevention; 
e-mail; Web pages; client anonymity; content providers; server anonymity; 
Web browser; Internet service provider; ISP; URL; address history; logged 
Web address; temporarily valid Web address; World Wide Web; WWW; data 
security 

Class Codes: B6210L (Computer communications); C5620W (Other computer 
networks) ; C7210N (Information networks) ; C7250N (Search engines) ; C6130S ( 
Data security) ; C5630 (Networking equipment) 

Copyright 2001, lEE 
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(c) 2005 Institution of Electrical Engineers. All rts . resery. 

05740657 INSPEC Abstract Number: B9410-6210G- 003 , C9410- 7210-008 
Title: Concepts of the NIST EXPRESS server 
Author (s) : Libes, D. 

Author Affiliation: Factory Autom. Syst. Div. , Nat. Inst, of Stand. & 
Technol., Gaithersburg, MD, USA 
p. 26-31 

Publisher: IEEE Comput . Soc . Press, Los Alamitos, CA, USA 
Publication Date: 1994 Country of Publication: USA viii+187 pp. 
ISBN: 0 8186 5835 5 

U.S. Copyright Clearance Center Code: 0 8186 5835 5/94/$03.00 

Conference Title: Proceedings of IEEE Workshop on Services for 
Distributed and Networked Environments 

Conference Sponsor: IEEE Comput. Soc. Tech. Committee on Distributed 
Process.; Czech Inst. Technol. (CVUT) 

Conference Date: 27-28 June 1994 Conference Location: Prague, Czech 
Republic 

Language: English Document Type: Conference Paper (PA) 
Treatment: Practical (P) ; Product Review (R) 

Abstract: The NIST EXPRESS server is a computational facility at the 
National Institute of- Standards and Technology (NIST) , which provides the 
ability to run toolkit-based applications remotely. Users e-mail EXPRESS 



schemas and other data files to the server , which runs the requested 
applications on the files and returns any diagnostics or output. 
Applications requiring interaction can either be returned via e-mail so 
that they can be run locally, or run remotely by telnet or rlogin across 
the Internet. Access to the EXPRESS server is available free to anyone 
who can send e - mail . Use is anonymous by default, however it is 
possible to use the server as a collaborative testbed in which case 
results can be immediately shared with other server users . The server 
is capable of restricting file access to one user or a subset of users. It 
is also possible to make files publicly available. The server maintains 
many STEP-related standards and draft standards for public access. 
Machine -processable standards such as STEP schemas can be incorporated 
automatically when processing user files even if they are not publicly 
available. The server dramatically lowers the traditional start-up cost 
and manpower required to obtain and install STEP and EXPRESS tools as well 
as the continuing support costs to upgrade and maintain the software, by 
leveraging NIST research, software support and installation, and computing 
facilities. The server enables people to experiment or demonstrate STEP 
without a significant investment of time and money, allowing them to build 
experience and make informed decisions about their future needs for STEP. 
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DIALOG (R) File 275:Gale Group Computer DB(TM) 
(c) 2005 The Gale Group. All rts . reserv. 

02317298 SUPPLIER NUMBER: 55276926 (THIS IS THE FULL TEXT) 

The Anonymous Internet. (free anonymous browsers and remailing 
services) (Interne t/Web/Online Service Information) 

PC Magazine, 18, 15, 107 
Sept 1, 1999 

ISSN: 0888-8507 LANGUAGE: English RECORD TYPE: Fulltext 

WORD COUNT: 417 LINE COUNT: 00037 

TEXT: 

Angela Graven and John Morris 

Even if you use the tools reviewed in our main story and follow all 
of the tips, you'll inevitably give out some private information. To remain 
incognito on the Internet, you need to use an anonymous browser and a 
remailer . 

An anonymous browsing service stands between your browser and Web 
sites. To use one, you visit the service and enter the URL of the site you 
want to view. Although slow, the service automatically blocks downloadable 
content such as Java and JavaScript, thereby preventing the site from 
capturing personal data . 

There are several free anonymous browsing services, such as Aixs Net 
Privacy (http://aixs.net/aixs), and Janus (www.rewebber.de). Perhaps the 
best known, Anonymizer (www.anonymizer.com), offers a free service and a 
faster fee-based service ($49.99 direct for one year). 

Lucent Personalized Web Assistant (http : //Ipwa. com: 8000) is a unique 
solution that preserves your anonymity while still delivering a 
personalized Web experience. For sites requiring registration in exchange 
for information, it generates fake user names, passwords, and e-mail 
addresses based on your "secret" (a universal password), the site you're 
visiting, and your real e-mail address. By the time you read this, LPWA 
will be a for- fee service called ProxyMate (www.proxymate.com) . 

Using a different approach to hide your identity, a remailer deletes 
your information in the header of the e-mail message, then forwards the 
message to the recipient. A pseudo- anonymous remailer 's host knows your 
identity. A truly anonymous remailer forwards messages through multiple 
remailers, making it impossible to trace them back to the actual sender. 

Like their browsing counterparts, remailers are free but slow, taking 
several days to get the message to its destination . Examples of some 
remailers include Anonymizer (www. anonymizer .com), Send Anonymous 
Email (www.ozemail.com.au/-geoffk/anon/anon.html), and Replay 
(www.replay.com) . The recipient has no way to reply to messages sent from 
these remailers. If you would like a reply, you can learn how to insert 
special commands in your e-mail (www.replay.com/remailer/chain.html) . 

Some might prefer to send anonymous messages via a free, Web-based 
e-mail account, such as those from Yahoo! Mail or Hotmail . These are 
easier to use, and your e-mail won't get held up for days wending its way 
through multiple remailers. 

Even a chemical formula can be v-GO's visual password. Just click on 
the right elements to unlock. 

Copyright (c) 1999 Ziff-Davis Inc. 

COPYRIGHT 1999 Ziff-Davis Publishing Company 

GEOGRAPHIC CODES/NAMES: lUSA United States 

DESCRIPTORS: Internet/Web technology application; E-mail 

EVENT CODES/NAMES: 360 Services information 

PRODUCT/ INDUSTRY NAMES: 7372681 (Internet Access Software); 4811520. 

(Online Services) ; 7372605 (Electronic Mail Software) 
NAICS CODES: 51121 Software Publishers; 514191 On-Line Information 

Services 
FILE SEGMENT: CD File 2 75 
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02219308 Supplier Number: 57094241 (THIS IS THE FULLTEXT) 

Privada(TM) Delivers Personal Privacy With New Anonymous Email Service. 

PR Newswire, p4895 

Nov 2, 1999 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count : 774 
TEXT : 

Privada's Messaging Incognito (TM) for Consumers Provides Industry's Most 
Effective P0P3 Anonymous Email Solution 

SAN JOSE, Calif., Nov. 2 /PRNewswire/ Privada, Inc. today 
announced . Messaging Incognito, a new anonymous email service that gives 
users the ability to protect their personal privacy while sending emails 
via the Internet. Messaging Incognito is the fully reliable private email 
solution based on the popular P0P3 email protocol (which means that users 
can continue using their favorite email readers) , and also one of the first 
to allow recipients to reply to an anonymous email address. Priced at 
$5 per month, the new service allows anyone to keep their real -world 
identity private as they communicate via the Internet. The first 2,500 
users to sign up for Messaging Incognito will receive their first year of 
service free, after rebate. 

Messaging Incognito allows users to create an online alias in order 
to keep their real -world identity private. Without Messaging Incognito, it 
is easy to determine an individual's real -world identity from pieces of 
information found in a normal email . 

"Internet users and the industry can no longer be laissez-faire about 
protecting online privacy," said Barbara Bellissimo, CEO of Privada. "With 
more and more sites tracking, storing and sharing site usage and e-mail 
communication, consumers need to be decisive about what personal 
information they share online. Messaging Incognito is a new service that 
allows consumers to take control over their personal information and 
provide this information only to the people they trust." 

Messaging Incognito is a bi-directional, email service that allows 
people to send and receive email privately and anonymously , without 
changing their existing P0P3 email application. It is delivered using 
PrivadaProxy (TM) -- free Java-based client software that brings privacy to 
the desktop. PrivadaProxy protects the user's privacy from the moment the 
email leaves the user's machine. 

Privada also offers Web Incognito (TM) , the company's robust anonymous 
Web browsing service. Together, Messaging Incognito and Web Incognito are a 
complete online privacy solution for businesses and consumers. When used 
together, these two products make it easy for anyone to access the vast 
power of the Internet without sacrificing privacy. An individual user can 
visit many sites, even asking questions via email, before deciding which 
site to do business with. Corporations can conduct research and communicate 
among remote locations confidentially. 

The only identifying information email recipients receive from 
Privada users is the user's anonymous Privada ID and the IP address of the 
Privada Network: This Privada IP address is not individual to each user and 
cannot be used to establish a person's real -world identity. However, the 
user's anonymous Privada ID is specific to each Privada customer. This ID 
cannot be used to identify the real -world identity of the user, but rather 
is intended to ensure the validity and consistency of a message's sender. 
All outgoing Privada messages are digitally signed with a key that is 
unique to the Privada user -- a further assurance of the consistency of the 
user, as well as providing strong non- repudiation . 

Messaging Incognito is one of the first anonymous email services 
to let users send and receive messages. Competing technologies are not 100% 
effective, and can often easily be disabled. Privada delivers not only 
effective privacy, but also protects the processing and integrity of all 
messages sent through the Privada Network. Privada's messaging solutions 



will not alter messages in any way. If the consumer has encrypted the 
content of the message using any standard encryption package (such as PGP) , 
that encryption will also remain intact. 

In the past, many Internet users concerned with online privacy have 
created extra email aliases with free Web-based services, such as 
Microsoft's HotMail . The recent security breach at HotMail (hackers 
revealed a security hole that enables anyone to view any Hotmail email 
account without a password) demonstrates that these services do not have 
the architecture necessary for true online privacy. Privada ' s Messaging 
Incognito uses the latest security technologies and Privada ' s 
patent -pending privacy architecture to protect its customers' online 
identities. Messaging Incognito compartmentalizes and encrypts each user's 
information separately, making Messaging Incognito much more effective 
privacy protection than web-based email. 

Pricing and Availability: 

Messaging Incognito for consumers is available immediately. The cost 
for the service is $5 per month, and will be free for the first year (after 
rebate) to the first 2,500 users. The PrivadaProxy software is free. 

About Privada 

A privately held company, Privada was established in 1997 to develop 
technologies and services that enable users to protect and control the 
dissemination of their personal information over the Internet. Businesses 
and consumers can benefit from using Privada ' s unique, patent -pending 
technologies. For more information on Privada, visit the company's Web site 
at www.privada.net. 

COPYRIGHT 2 000 Gale Group 

COPYRIGHT 1999 PR Newswire Association,- Inc. 
PUBLISHER NAME: PR Newswire Association, Inc. 
COMPANY NAMES: *Privada Inc. 

INDUSTRY NAMES: BUS (Business, General); BUSN (Any type of business) 
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Anonymous e - mail now a reality. (Brief Article) 
Computer Dealer News, 15, 46, 36 
Dec 3, 1999 

DOCUMENT TYPE: Brief Article ISSN: 1184-2369 LANGUAGE: English 

RECORD TYPE: Fulltext 

WORD COUNT: 79 LINE COUNT: 00009 

TEXT: 

TWICKENHAM, U.K. -- A couple of lads from Britain have launched a new 
Web site that hopes to capitalize on the surprising amount of vitriol 
that ' s out there on the Web . 

Their new Web site, aptly named www.poisonpen.net, offers users the 
ability to send anonymous e - mails without fear of having them traced 
back to the source . 

The service is aimed at ex-girlfriends, ex-boyfriends, disgruntled 
employees, targets of unwanted sexual advances and ticked-off people 
everywhere . 

COPYRIGHT 1999*Plesman Publications 

INDUSTRY CODES/NAMES: BUSN Any type of business; CMPT Computers and 

Office Automation; INTL Business, International; RETL Retailing 
FILE SEGMENT: TI File 148 
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01103695 CMP ACCESSION NUMBER: NTG19960901S0068 

Multiple E-Mail Addresses: Stop the Insanity! - You can trust your alias 

e - mail address to follow you like your shadow (cool tools) 
Rich Santalesa 
NETGUIDE, 1996, n 309, PG125 
PUBLICATION DATE: 960901 

JOURNAL CODE: NTG LANGUAGE: English 

RECORD TYPE: Fulltext 

SECTION HEADING: Cool Tools 

WORD COUNT: 118 5 

TEXT: 

In the plodding B.I. (Before Internet) era, stable e-mail addresses 
were a fact of life. Mail gateways then, as now, were common but tied 
primarily into commercial e-mail services -CompuServe, MCI Mail, EasyLink, 
and a handful of others. Hard as it is to believe, in 

the B.I. days folks held onto addresses for years, even dragging them 
along from job to job. Today, e-mail addresses change more often than 
some people change their socks . 

Switch jobs, change e-mail. Switch ISPs, change e-mail. It's 
Thursday? Time to change your e-mail address. What can you do to stop 
this madness and let your friends and acquaintances keep up with your 
e-mail jumps? Simple. Just create a mail alias. 

Mac, OS/2, and Windows 95 users are already familiar with the alias 
concept, though Windows 95 and OS/2 dub them "shortcuts." Aliases are 
essentially pointers. On the Mac, aliases are small files, stored 
anywhere for your convenience, which link to the real file located 
elsewhere. Mail aliases work the same way, using e-mail addresses instead 
of files. Any mail sent to an alias address, which -resembles any other 
e - mail address, immediately forwards your correspondence to the e-mail 
address you've selected as the end destination . Starting to see how 
useful this is? 

picking the right alias 

With the right mail alias , chopping the bouncing e - mail problem 
down to size is child's play. Play your alias cards right and you'll 
have a nearly permanent e-mail address regardless of how many ISPs or 
jobs you zip through. Just don't confuse the two main types of mail 
aliases, which I divide into internal and external aliases. 

An internal alias created at your current e-mail account is 
extremely handy, but it doesn't tackle changing addresses. An internal 
alias allows one e - mail address to serve multiple purposes while 
helping to consolidate mail. Let's look at an example to see the big 
picture. 

In my spare time I write a newsletter called RichNet covering New 
York City and other topics. Through my ISP, I set up a free alias 
specifically for RichNet mail. Any mail sent to the alias richnet® 
interramp.com still lands in my regular e-mailbox, rsantale® 
interramp.com, but filtering my mail is now much easier. Think of 
internal aliases as basically a second slot on a real mailbox, and you've 
mastered the idea of giving one e-mail account multiple addresses. 

Keeping the same e-mail address for life, however, requires an 
external alias -the ultimate power in mail forwarding. An external alias 
creates an outside mail drop-outside your ISP, that is-similar to 
real -world P.O. boxes that have the additional power to forward mail. A 
side benefit of external aliases is rather slick: With an external alias, 
your America Online, CompuServe, or Prodigy account can be easily 
"Internetized. " Define the alias address (for example, joel@sol.com), 
print it on your business cards, and then sit back and pick up the 
forwarded mail from within the familiar comfort of AOL, CompuServe, or 
Prodigy. 

the free and the cheap 

Shop around and you can create an external alias for free. In fact, 
various organizations offer external aliasing as a benefit of membership. 
For example, the Institute of Electrical and Electronics Engineers 
(www.ieee.org) hands out free external aliases to its members. For 
engineers who might switch jobs every few years, a stable jdoe@ieee.org 



address can be a crucial means of maintaining contact with colleagues . 
IEEE members who want an external alias can have one created by simply 
firing a message to aliases@ieee.org. Include your forwarding e-mail 
address, name, phone, fax, and member number. 

Other organizations charge a minimal annual fee. Members of the 
Association for Computing Machinery, a popular academic computing 
organization, can sign up for an ©acm.org alias for $10 per year ( 
www.acm.org/acmns_info/mailforwarding.html) . If you belong to a club or 
organization boasting an online presence, check if aliases are offered. 
You could be pleasantly surprised. 

Of course, using an organization-based alias is perfect if you plan 
to be a proud member through the ages. If not, the number of companies 
providing alias services grows each month. 

Bigfoot for Life is a new service that launched in June with a 
splash {see "Bigfoot Goes Where You Go," August, page 40). Bigfoot ( 
www.bigfoot.com) offers a free, "permanent" e - mail alias as part of 
its program. To start, register your name, password, new e-mail address 
{name@bigfoot.com), and forwarding e-mail address in its directory, and 
Bigfoot will send a confirmation e-mail {if all goes well). Then, 
whenever your e-mail address changes, a quick visit to Bigf oot ' s Web site 
is all it takes to update the mailbox pointed to by your bigfoot . com 

alias. The catch, if you want to call it one, is that in exchange 
for this e-mail largesse, Bigfoot builds up a directory of Internet users 
that it hopes will attract more visitors, which in turn will attract 
advertisers to the Bigfoot site. 

Paranoid about e-mail directories or need special forwarding 
abilities? Try USA.NET (www.usa .net) , which offers a variety of aliasing 
and forwarding plans. A single basic alias with forwarding and filtering 
costs $18 per year. The next level, priced at $3 0 per year, adds a 
second forwarding address with a filtering option and the ability to read 
mail directly from the alias e-mailbox via standard POP/SMTP mail . 
software. Finally, for $36 per year you also can read your mail using any 
Web browser . 

Teleport (www.teleport.com/support/ email / alias .htm), an ISP, 
charges a one-time fee of $25 per alias, with no limit to the number of 
aliases you can purchase. But Pobox (www.pobox.com) might be a better 
bargain. For $15 a year (your initial three months are free), it'll dole 
out three alias addresses of your choosing (for example, ham@pobox.com, 
cheese@pobox.com, and mayo@pobox.com) . 

In the St range -but -true department, Pobox allows aliases containing 
thousands of characters in length. Why anyone would need an address that 
long is beyond my ken. Even so, you can sign up for Pobox aliases via 
e-mail. Drop a line to new @pobox.com, listing your requested aliases, 
forwarding address, and any other information you'd like to include. A 
second set of three aliases is only $7 per year. 

In addition, Pobox is one of the few alias providers with URL 
redirection as part of the price of its service. URL redirection allows 
you to move your home Web pages from ISP to ISP while maintaining a 
constant URL. Smart stuff. 

A somewhat different alias service has been dreamed up by VanityMail 
(www.vanitymail.com). VanityMail provides aliases but combines them with 
a domain name from VanityMail ' s long list of names. The result is you can 
create a custom, descriptive alias for a one-time setup fee of $10.95, 
with a monthly charge of $6.51. 

keeping tabs 

If everyone used aliases, staying in touch with friends, co-workers , 
and acquaintances would be downright easy. When all. else fails, however, 
try jumping over to one of the Internet e-mail directories, such as 
Doubleclick Inc . ' s Internet Address Finder (www.iaf.net) or Fourll 
(www.fourll.com) . I've found them useful for tracking people, though the 
listed e-mail addresses are often not the person's latest , greatest 
address . 

Happy e- mailing. 

Rich Santalesa is executive editor of NetGuide Magazine, 
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